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IN THE CLAIMS: 
Amended claims follow: 

1 . (Currently Amended) A method for reporting on network analysis, comprising: 

(a) collecting network traffic information utilizing a plurality of agents installed in 
computers distributed among a plurality of zones; 

(b) receiving the network traffic information collected from the agents associated 
with each zone at a separate host controller; and 

(c) transmitting a report on the network traffic information from the host controller 
to a computer coupled thereto via a network; 

wherein a plurality of consoles are coupled to the host controller for collecting 
the network traffic information from the host controller and displaying the network 
traffic information from the host controller, wherein a user interface is adapted for 
analyzing an output; 

wherein a map of the network is generated based on the network traffic 
information; 

wherein the report includes a plurality of objects in a tree representation , where 
the objects are displayed in the tree representation : 

wherein intrusion detection services are provided based on the network traffic 
information; 

wherein the network traffic information relates to wireless network traffic; 

wherein at least one zone controller chooses a port number associated with an 
application and pushes a configuration request to a plurality of the host controllers in an 
associated zone, and the host controllers push the configuration requests to the agents so 
that the agents begin to monitor a port associated with the port number, such that 
monitor data is sent from the agents to the host controllers and buffered, whereafter the 
host controllers update the at least one zone controller with consolidated monitor data, 
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where differences in delay times are calculated to construct an enterprise picture of 
latency; 

wherein each host controller interfaces with at least one of the agents bv 
determining whether a signal has been received from the at least one agent, where, in 
response to the signal, the at least one agent is sent commands including a first interval 
setting and configuration data such that the at least one agent transmits the network 
traffic information in a manner that is based on the configuration data and at a first time 
interval based on the first interval setting, each host controller being adapted for 
filtering unicast network traffic, thereby picking up flooded traffic on a domain to 
ensure that utilization calculations are correct: 

wherein each host controller interfaces with the at least one zone controller bv 
determining whether instructions are received from the at least one zone controller, the 
instructions including a second interval setting indicating a second time interval based 
on which the network traffic information is sent to the at least one zone controller and 
dictating the manner in which the at least one agent operates per the commands sent 
from each host controller to the agents, wherein the second interval setting is monitored 
and each host controller polls for the receipt of a demand over the network, the network 
traffic information being transmitted to the at least one zone controller in response to at 
least one of the demand and the cessation of the second time interval . 

2. (Original) The method as recited in claim 1, wherein the report is capable of 
being displayed on the computer utilizing a network browser. 

3. (Original) The method as recited in claim 1, wherein the network includes the 
Internet. 

4. (Previously Amended) The method as recited in claim 1, and further comprising 
receiving a request at one of the host controllers for a report on the network 
traffic information corresponding to the zone associated with the host controller. 
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5. (Original) The method as recited in claim 4, wherein the report is transmitted h 
response to the request. 

6. (Original) The method as recited in claim 1 , wherein the report includes a 
network analyzer report. 

7. (Cancelled) 

8. (Cancelled) 

9. (Currently Amended) A computer program product for reporting on network 
analysis, comprising: 

(a) computer code for collecting network traffic information utilizing a plurality of 
agents installed in computers distributed among a plurality of zones; 

(b) computer code for receiving the network traffic information collected from the 
agents associated with each zone at a separate host controller; and 

(c) computer code for transmitting a report on the network traffic information from 
the host controller to a computer coupled thereto via a network; 

wherein a plurality of consoles are coupled to the host controller for collecting 
the network traffic information from the host controller and displaying the network 
traffic information from the host controller, wherein a user interface is adapted for 
analyzing an output; 

wherein a map of the network is generated based on the network traffic 
information; 

wherein the report includes a plurality of objects in a tree representation , where 
the objects are displayed in the tree representation : 

wherein intrusion detection services are provided based on the network traffic 
information; 
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wherein the network traffic information relates to wireless network traffic; 
wherein at least one zone controller chooses a port number associated with an 
application and pushes a configuration request to a plurality of the host controllers in an 
associated zone, and the host controllers push the configuration requests to the agents so 
that the agents begin to monitor a port associated with the port number, such that 
monitor data is sent from the agents to the host controllers and buffered, whereafter the 
host controllers update the at least one zone controller with consolidated monitor data, 
where differences in delay times are calculated to construct an enterprise picture of 
latency; 

wherein each host controller inter faces with at least one of the ag ents hy 
determining whether a signal has been recei v ed from the at le ast one agent where, in 
response to the signal, the at least one agent is sent c ommands jngjuding a first interval 
settin g and configuration data such that the a t least one ag ent transmits the netwnri- 
traffic information in a manner tha t is b a s e d o n the configura tion data and at a fire, time 
interval based on the first interval setting ea c h host conn-offer being adap ted for 
filtering unicast network traffic, thereby p ickin g U p flooded traffic on a domain to 
ensure tha t utilization calculations are correct; 

wherein each host controller interfaces with t he at least one zon e controller h Y 
determining whether instructions arc received fr om the at least one zone controller ftg 
instructions including a second interval settin g indicating a se cond time interval based 
on which the network traffic information is sent to the at least one rone rpntroller and 
dictating the manner in which the at least o n e agent onerat es per the command 
from each host controller to the agents, where i n the second int erval setting is monitored 
and each host controller polls for the receip t of a demand over the network the network 
traffic information being transmitted to the at least one zone controller in resp onse to at 
least one of the demand and the cessation of the second time interval 
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1 0. (Original) The computer program product as recited in claim 9, wherein the 
report is capable of being displayed on the computer utilizing a network 
browser. 



11. 



12. 



(Original) The computer program product as recited in claim 9, wherein the 
network includes the Internet. 

(Previously Amended) The computer program product as recited in claim 9, and 
further comprising receiving a request at one of the host controllers for a report 
on the network traffic information corresponding to the zone associated with the 
host controller. 



1 3. (Original) The computer program product as recited in claim 12, wherein the 
report is transmitted in response to the request. 

1 4. (Original) The computer program product as recited in claim 9, wherein the 
report includes a network analyzer report. 

15. (Cancelled) 

16. (Cancelled) 

1 7. (Currently Amended) A system for reporting on network analysis, comprising: 

(a) logic for collecting network traffic information utilizing a plurality of agents 
installed in computers distributed among a plurality of zones; 

(b) logic for receiving the network traffic information collected from the agents 
associated with each zone at a separate host controller; and 

(c) logic for transmitting a report on the network traffic information from the host 
controller to a computer coupled thereto via a network; 
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wherein a plurality of consoles are coupled to the host controller for collecting 
the network traffic information from the host controller and displaying the network 
traffic information from the host controller, wherein a user interface is adapted for 
analyzing an output; 

wherein a map of the network is generated based on the network traffic 
information; 

wherein the report includes a plurality of objects in a tree representation , where 
the objects are displayed in the tree representation : 

wherein intrusion detection services are provided based on the network traffic 
information; 

wherein the network traffic information relates to wireless network traffic; 
wherein at least one zone controller chooses a port number associated with an 
application and pushes a configuration request to a plurality of the host controllers in an 
associated zone, and the host controllers push the configuration requests to the agents s< 
that the agents begin to monitor a port associated with the port number, such that 
monitor data is sent from the agents to the host controllers and buffered, whereafter the 
host controllers update the at least one zone controller with consolidated monitor data, 
where differences in delay times arc calculated to construct an enterprise picture of 
latency; 

wherein each host controll er interfaces with at least one of the agents bv 
determining whether a signal has b een received from the at least one ag e nt where, in 
response to the signal the at least one agent is sent commands including a first interval 
setting; and configuration data such that the at least one agent transmits the network 
traffic information in a manner that is based on the configuration data and at a first time 
interval based on the first interval s etting, each host controller being adap ted for 
filtering unicast network traffic- ther eby picking u p flooded traffic on a domain to 
ensure that utilization calculations are correct: 

wherei n each host controller interfaces with the at least one zone controller bv 
determining whether in structions are received from the at least one zone controller, the 
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instructions incl„din P a seoondi ntorval setti np i ndica ting a second time interval ^ 
on which the network traffic information is sent ^ at least on. ,nn. „ H 

dictating the manner in which the at least one a P enr operates ner fog __dj sent 

from each host controller to the agents wherein th e second interval getting is moxn___d 
and each host controller polls for the receip t of a de mand over thg netwo rk, the networV 
traffic information being transmitte d to th e at leas t one zone controller in resp ond tn *t 
least one of the demand and the cessati o n of the second time interval 

1 8. (Original) The system as recited in claim 1 7, wherein the report is capable of 
being displayed on the computer utilizing a network browser. 

1 9. (Original) The system as recited in claim 1 7, wherein the network includes the 
Internet. 

20. (Previously Amended) The system as recited in claim 1 7, and further comprising 
recei ving a request at one of the host controllers for a report on the network 
traffic information corresponding to the zone associated with the host controller. 

21 . (Original) The system as recited in claim 20, wherein the report is transmitted in 
response to the request. 

22. (Original) The system as recited in claim 1 7, wherein the report includes a 
network analyzer report. 

23. (Cancelled) 

24. (Cancelled) 

25. (Currently Amended) A method for reporting on network analysis, comprising: 
NAI1P064_01.306.01 -8- 
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(a) collecting network traffic information utilizing a plurality of agents installed in 
computers distributed among a plurality of zones; 

(b) receiving the network traffic information collected from the agents associated 
with each zone at a separate host controller; 

(c) receiving a request at one of the host controllers for a report on the network 
traffic information corresponding to the zone associated with the host controller; 
and 

(d) transmitting the report from the host controller to a computer coupled thereto via 
a network; 

(e) wherein the report is capable of being displayed on the computer utilizing a 
network browser; 

wherein a plurality of consoles are coupled to the host controller for collecting 
the network traffic information from the host controller and displaying the network 
traffic information from the host controller, wherein a user interface is adapted for 
analyzing an output; 

wherein a map of the network is generated based on the network traffic 
information; 

wherein the report includes a plurality of objects in a tree representation , where 
the objects are displayed in the tree representation : 

wherein intrusion detection services are provided based on the network traffic 
information; 

wherein the network traffic information relates to wireless network traffic; 

wherein at least one zone controller chooses a port number associated with an 
application and pushes a configuration request to a plurality of the host controllers in an 
associated zone, and the host controllers push the configuration requests to the agents so 
that the agents begin to monitor a port associated with the port number, such that 
monitor data is sent from the agents to the host controllers and buffered, whereafter the 
host controllers update the at least one zone controller with consolidated monitor data, 
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where differences in delay times are calculated to construct an enterprise picture of 
latency; 

wherein eac h host controller interfaces with at least one of the agents bv 
determining whether a signal has been received from the at least one agent, where, in 
response to the signal the at least one ag ent is sent commands including a first interval 
setting and configuration data such that the at least one agent transmits the network 
traffic information in a manner that is based on the configuration data and at a first time 
interval based on th e first interval setting, each host controller being adapted for 
filtering unicast network traffic, thereby picking up flooded traffic on a domain to 
ensure that utilization calculations are correct: 

wherein eac h host controller interfaces with the at least one zone controller by 
determining whether i nstructions are received from the at least one zone controller, the 
instructions including a second interval setting indicating a second time interval based 
on which the netwo rk traffic information is sent to the at least one zone controller and 
dictating the manner i n which the at least one agent operates per the commands sent 
from each host contr oller to the agents, wherein the second interval setting is monitored 
and each host contro ller polls for the receipt of a demand over the network, the network 
traffic information b eing transmitted to the at least one zone controller in response to at 
least one of the demand and the cessation of the second time interval . 

26.-29. (Cancelled) 
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